This invention relates to a tamper monitoring system and method.
Tags are small and inexpensive devices which may be attached to or put in objects, persons, vehicles, and aircraft. The tags may periodically transmit their identification code (ID), status, data and other information, and may also receive information, such as coordinate, setup, programming, control and/or other information. Active tags, operating on a commodity battery, are capable of several hundred feet of radial coverage. Hundreds or thousands of tags can be simultaneously detected and read.
In many applications, there is a need for a tag to have additional capabilities, such as providing tamper sensors and other inputs that are integrated with the tag. Specifically, there is a need for tags that can provide security for items, objects, material, vehicles or persons, in such a manner as to prevent entry, theft, sabotage or other detrimental activity. The tag may seal, or otherwise secure, items it is designed to protect but also to protect itself from being overcome or rendered ineffective.
Additionally, there is the need for a tag with communication capabilities and functions so that it can play a part in global monitoring, supply chain management and security management, with remote monitoring, control and processing capability, such as on an Internet website. In one example, a tamper tag employs a closed-loop fiber optic cable, where both ends of the cable are connected to the tag, and the cable is fed through, around or is attached to one or more items such as containers containing a critical or dangerous material. A light or infrared signal originating in the tag is fed to one end of the cable and detected at the other end by the same tag. Any attempt to disconnect, cut or remove the cable, is immediately detected and a tamper-initiated wireless signal, such as a radio signal, is sent to one or more receivers and a monitoring system.
In another example, it may be desired to globally monitor and track the movement of containers, mail, packages or other items, using the Internet, wireless networks, telephone lines and other communication means. The monitoring and tracking can be accomplished with signposts and local controller systems located in a ship, train, airplane, truck loading and unloading port and customs area. Signposts can interrogate a tamper tag on a container, sending a signpost ID, location, time and date stamp, and other status information that can be transmitted to a remote overall system controller, and/or stored in the tag in order to maintain a trip and incidence record, for reading upon arrival at a final destination. The tamper tag can also seal or secure the container and send an immediate alert signal if the container or tag integrity is being tampered with or if it has been tampered with in the past.
Conventional tag systems employ a wire or conductive cable, and measure the continuity of a voltage or current to confirm that tampering has not occurred. However, one can place a bypass connection, and then cut the wire with the system not detecting a tamper event. In a more complex case, a cable with an internal conductor and external connector is used, requiring that both connections be bypassed.
Other prior systems use an intermixing of fibers in a fiber optic bundle or cable so as to create a unique “fingerprint” of the output pattern. Fiber optics are highly advantageous since they provide high immunity to environment inputs such as moisture and electrical interference, do not create a conductive path, and do not require two conductors to create a circuit. However, prior systems are complex and costly because they require multiple receiving detectors, apertures, and lenses to read the optic pattern.
Other fiber optics systems use a visual light or infrared signal that is operated by a random number sequence. However, the number of alternatives is neither very high nor very random, because it is very difficult to create a high number of codes in a small tag. As a result, the “random” number can be easily analyzed and replicated, and a pattern can be ascertained and duplicated, to defeat the system.
Examples of conventional signpost, tag and receiver monitoring, tracking and locating systems include the following:
U.S. Pat. No. 6,420,971 discloses an electronic seal that has a housing and a closure member operable with the housing to form a seal. The electronic seal has a core and a sensor assembly for detecting tampering. The core is a fiber optic cable, and the sensor assembly includes an integrity sensor having an optical source and an optical detector.
U.S. Pat. No. 6,624,760 discloses a low-cost monitoring system that has an extremely low power consumption which allows remote operation of an electronic sensor platform (ESP) for a long period. The monitoring system provides authenticated message traffic over a wireless network and utilizes state-of-health and tamper sensors to ensure that the ESP is secure and undamaged. The system has a robust ESP housing suitable for use in radiation environments. With one base station (a host computer and an interrogator transceiver), multiple ESP's can be controlled at a single monitoring site.
U.S. Pat. No. 5,646,592 discloses a simple trip-wire or magnetic circuit for a shipping container. The trip-wire or magnetic circuit provides continuity, which is detected electrically. If the continuity is interrupted by a forced entry of the container, electrical detection means, such as a radio-frequency-identification (RFID) tag, will alert a monitoring station. Also a magnetic circuit and a detection device (RFID tag) can be embedded into a shipping article during manufacturing. The RFID tag would communicate with an interrogator unit, which can be connected to a host computer. The interrogator and/or the host computer would then monitor the shipping container's status (opened or closed).
U.S. Pat. No. 4,523,186 discloses a seal system for materials, which indicates changes in environmental conditions that evidence attempts to bypass the seal. The seal system includes a detector for reading an optical signal transmitted through a loop, and one or more additional detectors for detecting environmental changes. These detectors are operatively associated with the seal so that detection of a break in the optical signal or detection of environmental changes will cause an observable change in the seal.
In U.S. Pat. No. 4,447,123, a fiber optic seal includes a transparent seal body having two spaced apart cavities. The ends of a fiber optic cable are secured within the spaced apart cavities, respectively. An electronic verifier injects light into one of the cable ends via a plurality of illumination light guides fixed within the seal body between an external surface and the illumination cavity. Light emitted from the other end of the fiber optic cable is transmitted from the detection cavity to the exterior surface of the sealed body via a plurality of detection light guides. The light is measured and converted by the verifier to provide a seal signature.
These conventional tamper monitoring systems have several drawbacks. For example, the conventional systems measure the presence or absence of a simple or constant signal in a cable. This makes the system easy to tamper with, because the signal can be easily duplicated and the cable can be easily bypassed.
The present invention overcomes the problems of the conventional tamper monitoring system. In the present invention, a tag can transmit and/or receive a non-constant signal, such as a modulated, encoded or encrypted signal, over a security cable to make it very difficult to tamper with the cable or the tag.
In accordance with one aspect of the invention, a tamper monitoring system includes at least one tag and a transmission link. The one tag includes a transmitter and a receiver. The first end of the transmission link is connected to the transmitter and the second end to the receiver. The transmitter is designed to transmit a varying signal through the transmission link to the receiver, and the receiver is designed to receive a signal from the transmission link and to correlate the received signal with the transmitted signal. When the received signal does not correlate with the transmitted signal, the tag transmits a tamper beacon.
In accordance with another aspect of the invention, a tamper monitoring method includes transmitting a non-constant signal, such as a modulated, encoded or encrypted signal, from a transmitter of at least one tag through a transmission link to a receiver of the at least one tag, receiving a signal from the transmission link with the receiver, correlating the received signal with the transmitted non-constant signal, and activating the tag to transmit a tamper beacon when the received signal does not correlate with the transmitted signal.
In a preferred embodiment, the transmitter is an optic transmitter, the receiver is an optic receiver, the communication link is a fiber optic cable, and the tag is an active RFID tag.
The signals may be analog or digital and are preferably modulated, encoded and/or encrypted. The signals can be visible or invisible light, infrared, laser, electrical or acoustic signals, or a combination of two or more of these signals. The transmitted signal can be a pulse signal and can be modulated, encoded and/or encrypted by varying at least one of pulse length, pulse absolute-transmission time, and pulse amplitude.
The correlation of the received signal with the transmitted signal can be performed in various manners. For example, it may include comparing the characteristics and properties of the received signal with those of the transmitted signal. Alternatively, it may include determining a cause-and-effect relationship between the received signal and the transmitted signal. The correlation may further include comparing the received signal with the average of one or more previously received signals, and when the difference between the received signal and the average is greater than a predetermined value, the tag transmits a tamper beacon.
In another preferred embodiment, the at least one tag includes first and second active tags. The first tag includes the transmitter and the second tag includes the receiver to form an open-loop system.
The at least one tag is programmable by a signpost, a portable controller or a system transmitter.
In this embodiment, the tag 12 preferably is an active RFID tag, and the transmission link 14 preferably is a fiber optic cable. The ends 20, 22 of the fiber optic cable 14 may be attached respectively to the transmitter 16 and receiver 18 of the RFID tag 12 in a loop arrangement. A light can be pulsed through the fiber optic cable 14 from the transmitter 16 to the receiver 18 as controlled by the RFID tag's microprocessor 26. The fiber optic cable 14 can be attached, wrapped around, inserted through or connected to some type of asset to be protected, tracked or secured.
The optic signal transmitted through the fiber optic cable 14 preferably is a pulse signal in order to minimize the tag power. The pulse signal can be a single pulse or a pulse having a fixed sub-carrier modulation or another type of modulation. The pulse signal can also be encoded and/or encrypted. When a signal is received by the receiver 18, a correlation, comparison and/or cause-and-effect evaluation can be performed on the pulse, carrier or sub-carrier frequency, coding, encryption, timing, width, amplitude and/or other analog and/or digital multi-dimensional characteristics of properties. This is then used to determine whether a tamper event has occurred. In the prior art, on the other hand, only the absence or presence of a simple or constant signal is determined.
When the receiver 18 does not receive the expected pulses, a tamper event is declared and the active RFID tag 12 sends out a tamper beacon. The tamper beacon can be a wireless tamper beacon that is transmitted from a local tamper monitoring system 10 to a global monitoring system or a website 34 via a wireless network, a telephone network, and/or the Internet 36, as illustrated in
If no tamper event is detected, the tag 12 may send a self-initiated periodic signal or an optional signpost-initiated signal to confirm its presence, proper operation and status, including such information as its battery condition. In addition, the tamper monitoring system 10 can optionally operate with fixed magnetic, radio or infrared signposts, locators, interrogators and/or portable control units to provide setup, control, management and/or locating capabilities.
The above-described embodiment of the present invention has various advantages. For example, using a pulse optic signal transmitted through a fiber optic cable enhances security and reduces power consumption. Simply cutting the fiber optic cable and introducing a second light source would not be sufficient to defeat the tamper monitoring system, because the microcontroller may look for predetermined pulses both in amplitude and time. Additionally, the fiber optic cable has certain desirable qualities, such as its natural resistance to harsh environmental conditions such as heat, cold, ultra violet radiation, water, dust, ice and various corrosive elements or chemicals, and its resistance to electronic, capacitive or inductive interferences. A copper or other type of electrical cable can be “spliced” to a second cable so that the original cable can be severed without detection. With a fiber optic cable, any “slicing” would interrupt the light pulses traveling through it. Thus, the fiber optic cable provides improved tamper detection. Another advantage of the fiber optic cable is that the light transmitter and receiver do not need a common ground or power source. Each can be powered separately and can be a distance from each other, connected only by the fiber optic cable.
Although in the embodiment shown in
In another preferred embodiment, the correlation, comparison and cause-and-effect evaluation can be performed adaptively. This may be performed by comparing, collating or evaluating the received signal with the average of one or more previously received signals, such as one or more preceding received signals. If the change is sufficiently abrupt, it is interpreted as a tamper event, but slow changes, within defined limits, are interpreted as changes cause by component aging, temperature, moisture or other non-detrimental factors and when the difference between the received signal and the average is greater than a predetermined value, the tag transmits a tamper beacon.
A signpost, a portable controller or a system transmitter can be used to activate and deactivate a tag in a secure manner or to change its properties such as its mode of operation, timing, coding, encryption, sensitivity, and so on.
Additionally, the system shown in
This application claims priority to U.S. Provisional Patent Application Ser. No. 60/675,336 filed Apr. 26, 2005 by Worthy et al., the entire disclosure of which is incorporated herein by reference.
Number | Name | Date | Kind |
---|---|---|---|
3854792 | Koella | Dec 1974 | A |
4095872 | Stieff et al. | Jun 1978 | A |
4106849 | Stieff | Aug 1978 | A |
4161348 | Ukrich | Jul 1979 | A |
4262284 | Stieff et al. | Apr 1981 | A |
4297684 | Butter | Oct 1981 | A |
4367460 | Hodara | Jan 1983 | A |
4447123 | Page et al. | May 1984 | A |
4523186 | Fiarman | Jun 1985 | A |
4546345 | Naito | Oct 1985 | A |
4878045 | Tamaka et al. | Oct 1989 | A |
5111184 | Heaton et al. | May 1992 | A |
5189396 | Stobbe | Feb 1993 | A |
5406263 | Tuttle | Apr 1995 | A |
5515030 | Citron et al. | May 1996 | A |
5583488 | Sala et al. | Dec 1996 | A |
5612675 | Jennings et al. | Mar 1997 | A |
5646592 | Tuttle | Jul 1997 | A |
5831531 | Tuttle | Nov 1998 | A |
5949151 | Nakajima | Sep 1999 | A |
5963131 | D'Angelo et al. | Oct 1999 | A |
6002501 | Smith et al. | Dec 1999 | A |
6037867 | Joseph et al. | Mar 2000 | A |
6040763 | Nakajima | Mar 2000 | A |
6049273 | Hess | Apr 2000 | A |
6069563 | Kadner et al. | May 2000 | A |
6104311 | Lastinger | Aug 2000 | A |
6265973 | Brammall et al. | Jul 2001 | B1 |
6340932 | Rodgers et al. | Jan 2002 | B1 |
6351215 | Rodgers et al. | Feb 2002 | B2 |
6362737 | Rodgers et al. | Mar 2002 | B1 |
6420971 | Leck et al. | Jul 2002 | B1 |
6552661 | Lastinger et al. | Apr 2003 | B1 |
6611556 | Koerner et al. | Aug 2003 | B1 |
6621410 | Lastinger et al. | Sep 2003 | B1 |
6624760 | Kinzel et al. | Sep 2003 | B1 |
6765484 | Eagleson et al. | Jul 2004 | B2 |
6831562 | Rodgers et al. | Dec 2004 | B2 |
7135970 | Kowal et al. | Nov 2006 | B2 |
7239238 | Tester et al. | Jul 2007 | B2 |
7274293 | Bradus et al. | Sep 2007 | B2 |
20020011932 | Rodgers et al. | Jan 2002 | A1 |
20020067262 | Lie | Jun 2002 | A1 |
20020089434 | Ghazarian | Jul 2002 | A1 |
20020185544 | Baillod | Dec 2002 | A1 |
20030076230 | Runyon et al. | Apr 2003 | A1 |
20030174059 | Reeves | Sep 2003 | A1 |
Number | Date | Country |
---|---|---|
4142529 | Jul 1993 | DE |
1063627 | Dec 2000 | EP |
1077440 | Feb 2001 | EP |
1191495 | Mar 2002 | EP |
Number | Date | Country | |
---|---|---|---|
20060261959 A1 | Nov 2006 | US |
Number | Date | Country | |
---|---|---|---|
60675336 | Apr 2005 | US |